hasherezade / malware_training_vol1

Materials for Windows Malware Analysis training (volume 1)
1.94k stars 186 forks source link

vol1-Mod1.2PE-S44 - Suggestion DUMPBIN & EDITBIN #20

Open BlueSkeye opened 3 years ago

BlueSkeye commented 3 years ago

The DUMPBIN & EDITBIN command line tools (available with all editions of Visual Studio when VC++ workload is installed) might be interesting references. The tools allows extensive dump/modification of many parts of a PE/OBJ file except those compiled with global optimization (/GL compiler option). These tools are helpfull when experimenting with PE files.

https://docs.microsoft.com/fr-fr/cpp/build/reference/dumpbin-reference?view=msvc-160 https://docs.microsoft.com/fr-fr/cpp/build/reference/editbin-reference?view=msvc-160